Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 104.18.243.99 |
| Software del servidor | cloudflare |
| CDN | Cloudflare |
| Compresión | gzip |
|
🔒 🟡 Mixed Content (1 recursos HTTP) | La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 104.18.243.99
Software del servidor cloudflare
CDN Cloudflare
Compresión gzip
🔒 🟡 Mixed Content (1 recursos HTTP) La página se sirve por HTTPS pero carga 1 recurso(s) por HTTP. Esto puede bloquearse en navegadores modernos.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Rendimiento
| Resolución DNS | 17.7 ms |
| Conexión TCP | 19.8 ms |
| Negociación TLS | 12.1 ms |
| Tiempo hasta el primer byte (TTFB) | 59.9 ms |
| Descarga de contenido | 0.6 ms |
| Tiempo total de respuesta | 60.5 ms |
Resolución DNS 17.7 ms
Conexión TCP 19.8 ms
Negociación TLS 12.1 ms
Tiempo hasta el primer byte (TTFB) 59.9 ms
Descarga de contenido 0.6 ms
Tiempo total de respuesta 60.5 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Meta descripción | Start selling what you know, see what sticks, and get paid. Simple and effective. |
| Canonical | https://gumroad.com/about |
| Título Open Graph | Earn your first dollar online with Gumroad |
| Descripción Open Graph | Start selling what you know, see what sticks, and get paid. Simple and effective. |
| Imagen Open Graph | https://assets.gumroad.com/images/opengraph_image.png |
Meta descripción Start selling what you know, see what sticks, and get paid. Simple and effective. Canonical https://gumroad.com/about Título Open Graph Earn your first dollar online with Gumroad Descripción Open Graph Start selling what you know, see what sticks, and get paid. Simple and effective. Imagen Open Graph https://assets.gumroad.com/images/opengraph_image.png Tecnologías Detectadas
| Tecnología | Google Analytics Google Tag Manager Cloudflare Stripe |
Tecnología Google Analytics Google Tag Manager Cloudflare Stripe
Cabeceras HTTP
| Date
| Mon, 31 Aug 2026 09:35:53 GMT |
| Content-type
| text/html; charset=utf-8 |
| Server
| cloudflare |
| Strict-transport-security
| max-age=31536000 |
| X-revision
| f1db851f7daf |
| X-gr
| PROD |
| Cache-control
| max-age=60, public, stale-while-revalidate=3600, s-maxage=300 |
| Server-timing
| cfEdge;dur=17,cfOrigin;dur=0 |
| X-request-id
| d879773c-9b55-44a2-816b-29c4c58f9de4 |
| X-runtime
| 0.031479 |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| X-download-options
| noopen |
| X-permitted-cross-domain-policies
| none |
| Content-security-policy
| default-src https: 'self'; child-src * data: blob:; connect-src 'self' blob: www.dropbox.com api.dropboxapi.com s3.amazonaws.com/gumroad s3.amazonaws.com/gumroad/ s3.amazonaws.com/gumroad-public-storage s3.amazonaws.com/gumroad-public-storage/ gumroad-public-storage.s3.amazonaws.com www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com analytics.google.com *.analytics.google.com analytics.tiktok.com files.gumroad.com d1bdh6c3ceakz5.cloudfront.net entitlements.jwplayer.com *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly iframely.net help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com wss://cable.gumroad.com assets.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com *.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com cdn.jwplayer.com *.jwpcdn.com gumroad.us3.list-manage.com analytics.twitter.com analytics.tiktok.com help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com assets.gumroad.com 'nonce-RKBu7SePBdJwzQROi+aoQ0dngaibid+01uf9Ld5bDHo=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' s.ytimg.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob: |
| Vary
| Origin, accept-encoding |
| X-original-headers-class
| Rack::Headers |
| Age
| 20 |
| Cf-cache-status
| HIT |
| Link
| ; rel=preload; as=style; crossorigin=anonymous; nopush |
| Content-encoding
| gzip |
| Cf-ray
| a33b0c38db0fd377-CDG |
| Alt-svc
| h3=":443"; ma=86400 |
Meta Tags
| Action-cable-url | wss://cable.gumroad.com/cable |
| Csrf-param | authenticity_token |
| Csrf-token | HCQn2esMCvbQlPj-hMtDGHg4zgBlZbu9aSMBBTuRbwBDrxNRR48U4vOY4APjVr-unbRq_rPw4jqq61UUrP_hDg |
| Fb:app_id | 149071038533330 |
| Fb:page_id | http://www.facebook.com/gumroad |
| Gr:environment | production |
| Viewport | initial-scale = 1.0, width = device-width |
| Gr:google_analytics:enabled | true |
| Gr:fb_pixel:enabled | true |
| Gr:tiktok_pixel:enabled | true |
| Description | Start selling what you know, see what sticks, and get paid. Simple and effective. |
Date Mon, 31 Aug 2026 09:35:53 GMT
Content-type text/html; charset=utf-8
Server cloudflare
Strict-transport-security max-age=31536000
X-revision f1db851f7daf
X-gr PROD
Cache-control max-age=60, public, stale-while-revalidate=3600, s-maxage=300
Server-timing cfEdge;dur=17,cfOrigin;dur=0
X-request-id d879773c-9b55-44a2-816b-29c4c58f9de4
X-runtime 0.031479
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-download-options noopen
X-permitted-cross-domain-policies none
Content-security-policy default-src https: 'self'; child-src * data: blob:; connect-src 'self' blob: www.dropbox.com api.dropboxapi.com s3.amazonaws.com/gumroad s3.amazonaws.com/gumroad/ s3.amazonaws.com/gumroad-public-storage s3.amazonaws.com/gumroad-public-storage/ gumroad-public-storage.s3.amazonaws.com www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com analytics.google.com *.analytics.google.com analytics.tiktok.com files.gumroad.com d1bdh6c3ceakz5.cloudfront.net entitlements.jwplayer.com *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly iframely.net help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com wss://cable.gumroad.com assets.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com *.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com cdn.jwplayer.com *.jwpcdn.com gumroad.us3.list-manage.com analytics.twitter.com analytics.tiktok.com help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com assets.gumroad.com 'nonce-RKBu7SePBdJwzQROi+aoQ0dngaibid+01uf9Ld5bDHo=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' s.ytimg.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob:
Vary Origin, accept-encoding
X-original-headers-class Rack::Headers
Age 20
Cf-cache-status HIT
Link ; rel=preload; as=style; crossorigin=anonymous; nopush
Content-encoding gzip
Cf-ray a33b0c38db0fd377-CDG
Alt-svc h3=":443"; ma=86400
